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Report on T/a of BAUDOT traffic. 8 July 1945 

Prepared by • Capt . J ack Magil avy , A.tT.S. mid D.P, UZTEU J , SIXTA 


1. The observations contained in this report are based on a 
comparatively short period of operation. Despite the small amount of 
material available, enough was at hand to permit certain definite 
conclusi to be drawn as to the correct approach to a T/A problem, 
which, In 5 Is essentials, is the same as the Russian Horse problem. 

Gaps in deductions were filled in by the Auswerter Karrenberg, 

2 It was found that the message preambles and endings in them- 
■ selves provide a wealth of material for analysis and in add i tit ion, the 
Russian Operators, like others, were inclined to be somewhat insecure 
in their chat. (As a result of the latter, three positive station 
identities were obtained). 

3, The following are a sample preamble and ending — broken 
down into their component parts, with pertinent remarks; 

PREAMBLE 

1 2 3 4 5 

S2BEST kj\/\ 3/1 29 

(1) ORIGINATING STATION . Cover names, changed at irregular 
intervals of from 3 to 14 days, are used instead of call/signs These 
names are retained by the net and reshuffled after each change, e.g,; 
Moscow uses the cover name "Apple", Krakow "Beans", and Rosifov ^Carrots" 
for the period '9/7 to 13/7* On the 14th Moscow used "Carrots", Rostov 
"Beans", and Krakow "Apple", Note; One such change occurred during 
the period of observation. 

(2) MESSAGE SERIAL NO . , Assigned by originating station. 

This number runs consecutively from day to day and does not revert to 1 
at the beginning of each 24 hour period. 

(3) DEPARTMENT ( ? ) . The exact significance of this portion of 
the preamble is not known. On some of the intercepted traffic it 
appeared as a letter and in several cases was 1 totally absent. When used 
however, it seems to have some connection with the Message Serial No, (2). 

(4) ? Name or purpose unknown but appears in every 

preamble preceding the group count (5 below). 

(5) GROUP COUNT . Number of groups in text including 
indicator (9) and bloknot (10). 

(6) DATE . 

(7) TBS OF ORIGIN . 


6 

3?7 


1 

1150 


8a 

SHO 


1 

8b 

ZVYEZDA 


8c 

SHTFROVKA 


_ 9 _ 

15019 
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( 8 ) ADDRESS, ROUTING INSTRUCTIONS AND PRIORITY . The length 
of this part of the preamble may consist of from 2 to 9 words. In 
the example given: 8a indicates "to cipher office" and is usually 
found in all messages preceding 8b, the cover name of the addressee; 

8c is the priority. Note ; Should .this message have been relayed, the 
cover name of the relaying station would also appear here, 

(9) INDICATOR , Normally found twice in each message, first 
group of the text - if 5/L traffic, sixth group if 5/p, In both 5/p and 
-/L traffic it appears as the last group of text before the Blok not 
(10 below). 

■1ISS AGE ENDING:' 

9 10- 1 J 13 

1 501 9 581 38 P, DEMAMQVA 1 323 

(10) BLOKNOT . "One time pad" sheet (?) number. Because of 
its continuity from message to message and from day to day, this 
number along with the message serial is undoubtedly the most import- 
ant and surest means of identifying a group, 

(11) KSREDALA . (Russian for "sent by"). This ?/ord may 
appear in abbreviated form or in full, 

(12) OPERATOR'S SIGNATURE . Always a proper name, 

(13) TIME SENT . Note*. One of the operators observed had 
a tendency to send this group preceding her signature. The standard 
practice however, is to transmit the time sent as the last group of the 
message, 

4. GENERAL OBSERVATIONS 

a. The bulk of the traffic intercepted on the 2- channel 
apparatus was 5/L and 5/p Military — preambles and endings were 
substantially the same in both. The 6 and 9- channel apparatus passed 
commercial traffic in clear text and presented no T/A problem. 

b, A few Police (SMERSH) messages v?ere passed on the 2- channel 
apparatus, 

o. No lateral working was noted, 

d. No "Q" code or procedure signals were employed, 

e v Frequencies used were all between 8000 and 11000 kcs. No 
pattern of frequency allocation could be discerned. 
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f. Frequency changes occur at irregular intervals, the 
procedure for which seems amazingly simple. The operator requesting 

the shift transmits, -"Will you change to kes, acknowledge by 

sending A-Z", Note: The number which precedes kes, when divided by 
23 gives the new frequency. The acknowledgment signal can be ary word 
or letter which strikes the originating operator's fancy, 

g. Operators' names provide an aid to the identification of 
subordinate subscribers. This is based on; 

(1) Relayed messages are re- transmit ted with the origin- 
ating station's cover name in position 1 of the 
preamble. 

(2) The relaying station's cover name appears in 
position- 8. 

(3) The operator at the relaying station signs the 
transmission, 

5. CONCLUSIONS 

a. A clear W/T picture can be obtained by a careful study and 
card indexing of even the smallest detail serving to characterize the 
traffic. Cover names, message serials, operators' names and bloknot 
numbers are of particular importance in this connection, 

b. If an efficient standard of interception i3 to be main- 
tained, the T/A processes required should be undertaken at the 
intercept station, in the closest possible collaboration with the 
set room. 


c. Experienced Traffic Analysts could quickly adapt them- 
selves to the Baudot problem with a minimum amount of training. 

Two of the essentials in such training would be a familiarization 
with the Russian Alphabet and some 50 Ddd phrases common to the traffic, 

u. At least one fluent Russian speaker should be present 
at all times to deal with plain language chat. 




